Daily digest · 2026-08-23

Daily Digest, 2026-08-23

TL;DR: Quiet day, one hard warning. NSA and CISA say attackers are using AI-written attack scripts against Siemens industrial controllers inside US critical infrastructure, with the scripts dressed up as ordinary monitoring tools. Elsewhere the theme is data collection creeping into new places: eye tracking is being pitched as a way to check someone's age, and researchers looked at when people hand work to an agent instead of clicking themselves.

Top stories

• NSA and CISA warn of AI-generated exploit scripts hitting Siemens S7 PLCs in US critical infrastructure (The Hacker News, 2026-08-20). Active targeting of S7 series controllers for reconnaissance and capability development, with model-written scripts disguised as legitimate monitoring software; defenders should hunt for that disguise and re-check OT exposure.
• HarmonEyes pitches eye tracking as an age assurance method (Biometric Update, 2026-08-21). Age checks move beyond selfie matching and facial age estimation into gaze data, which carries far more about a person than the age band the system says it needs.

Also notable

• Study of when users hand a task to an MCP-connected agent instead of doing it themselves, user research on delegation patterns in an MCP-wired CMS, relevant to where confirmation prompts belong.